Aseem Mohan Email & Phone Number

Milwaukee, Wisconsin, Us

Strategic Leadership: Demonstrated ability to develop and execute strategic plans for IAM initiatives, cyber Risk Assessment, vulnerability management, aligning them with business goals and objectives.Global Operations Management: Proven track record of effectively managing IAM operations on a global scale, including overseeing teams across multiple regions and time zones.Cross-Functional Collaboration: Experience collaborating with cross-functional teams, including IT, security, compliance, and business units, to ensure seamless alignment with organizational objectives.Risk Management and Compliance: Expertise in mitigating security risks and ensuring compliance with regulatory requirements (such as GDPR, HIPAA, SOX) through robustpolicies, procedures, and controls.Technology Implementation: Hands-on experience with implementing IAM technologies and solutions, such as Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Identity Governance and Administration (IGA).Operational Efficiency Improvement: Track record of driving operational efficiency and cost savings through process optimization, automation, and continuous improvement initiatives within IAM operations.Vendor Management: Proficient in vendor selection, negotiation, and management, including overseeing third-party vendors and service providers for IAM-related solutions and services.Team Leadership and Development: Strong leadership skills with a focus on building high-performing teams, fostering a culture of collaboration, innovation, and continuous learning, and developing talent within the organization.Communication and Stakeholder Engagement: Excellent communication and stakeholder management skills, with experience presenting complex technical concepts to non-technical stakeholders and executive leadership.Results-Driven Approach: Proven ability to deliver measurable results and drive business outcomes through effective strategies, initiatives, and implementations.

Worldwide, Oo

As director, I own end to end delivery for vulnerability assessment and penetration testing programs for existing clients which includes sectors as banking, Insurance and telecom• Drive client engagement with sales team to help capture requirements document and scope finalization, manage critical application , new releases , sprints and go-to-market applications.• Driving application security programmes using various SAST / DAST tools supporting DEVSECOPS model , perform residual risk rating, maintaining risk register,• Lead proposal presentations to stakeholders which includes technical and senior management stakeholders• Responsible to employ, engage, retain and managing a high performance team size of 16 resources in Singapore and 4 resourcesin APAC with capacity plans in place.• Work successfully with project teams following project management methodologies, i.e. Agile methodology• Driving security programs from initial client contact till delivery, remediation , and security recommendations

Manchester, Greater Manchester, Gb

Manchester, Greater Manchester, Gb

• Driving application and infrastructure security assessment programs, reports reviews, risk register strategy, provide gap analysis review and delivered a risk buy down strategy considering cost and risk appetite as bases.• Lead to Improve cyber security risk posture, carry out security architecture design reviews and recommendations• Drive framing strategy for threat, risk analysis and risk management aligned to cyber security authority of Singapore, NIST SP800-37, MITRE, and as per industry best practices.• Drive flagship application identifications which are critical for clients to run business, special focus on the compliance and limitedscope testing for such applications and maintaining risk register• Assess first line PCD and ICS implementation of controls across and provide recommendations on remediation.• Driving programs for regional Information security, compliance, and governance Cloud Security Benchmarking review andremediation.• Managed security audits reviews, provide gap reports, driving calls with clients for walk through on security findings• Client includes but not limited to major telecomm player, global bank, Insurance, digital bank, government agency etc.

New York, New York, Us

•Led technology and business project for the implementation SSO over 1,200 applications globally, including 200+ high risk applications.•Identity Access Management SME for ASPAC region for migration for application DC migration, worked with large number of stakeholders, applied phased migration approach and maintained zero downtime, mitigated reputational and financial risk to the bank.•Drove vulnerability assessment service management in the region and responsible for threat management, assessment requests, assessment metrics, assessment risk management & external vulnerability assessment processes aligned to NIST 800-37 framework.•Setup and drive calls with C-Level; establish communication channels, manage project issues log tracking and reporting in a functional matrix organization.•Manage and train highly technical and productive team in the region to support the execution of application security assessments mapped to OWASP top 10, L1 operations and ensuring the quality of the assessment reports.•Manage external group of vendors who provide vulnerability assessment services to businesses in Asia , performing TPISA, TPRAP.•Defined and drove the process of conducting Global, Intel led and new hire Phishing campaign to increase security awareness on threat of social engineering through simulations.•Follows up on assessment findings and action plans to ensure completion by key stakeholders which includes business and application teams.•Led Regulatory VA testing, such as DDOS attacks and Compliance testing of business critical applications, from planning, scope of testing, active participation from VA stand point till stand down, finding analysis, report review and submitting report to the regulators. •Create detailed risk assessment reports which explain identified security weaknesses, describe potential business risks, present prioritized recommendations for remediation, and estimate costs and effort levels for remediation.

Singapore, Singapore, Sg

Lead one of the Top 3 largest implementations of Siteminder globally, based on the number of applications supported/protected. (Computer Associates)Provided one password authentication for over 1,200 applications globally, including 200+ high risk applications.Managed 179 servers and provide engineering support for provisioning, entitlements, seamless login, federation services for 3rd party internal and external applications.Over 1 million (330,000 Internal/700,000 external) users are supported for authentication and authorization using Siteminder and over 12 Million External users for Directory services.Process an average of 1 billion authentications/authorizations per month (12 million authentications and 32 million authorizations per day).7,600 Directory groups are managed and supported globally allowing standardized and simplified user management for Siteminder enabled applicationsImplemented Access management solution ,SSO features with in various web portal-wide Applications with Netegrity Siteminder5.5/6/R12.Hands-on Experience in Upgrading Siteminder 5.X deployment to Siteminder6.X/R12 sp3 including the Web Agents in development, Testing, staging & production environments.Installed and configured Siteminder Web Agents 5.5/6/R12, web sphere Siebel Agents 1.03/5.6 on IIS, iPlanet, Apache on Windows, UNIX, SUN Solaris, HP-UXInstalled and configured site minder Application Agents (Identity Assertor) on Web-sphere and configuration of authentication provider on web-sphere console.Performing administration and maintenance work includes environment upgrade, daily backups, password resets for all ldap admin accounts, add del search ldif modify , replication in Ldap 5.2, 6.x, server health monitoring, Root cause analysis of problems etc.

Bangalore, Karnataka, In

Drove kick-off call for client engagement to understand, analyze the requirements,document it, and get the sign-off to setup right expectation. Led application Integration operation for Xerox’s business critical applications identity and access management solution as well as with third party federation solution.Designing the policies and the objects which will be most feasible for the client’s environment.Create, manage, and own the implementation of IAM solution from initiation till sign-off for application.Ensures Integration implementations are done according to project triple constraints.Perform problem escalations to vendors and Web & Security Integration senior management to ensure prompt resolution to highly visible/severity problems.Implemented SSO in multiple cookie domain, federation and upgrade of SSO components from DEV to PROD without impacting BAU.

Pune, Maharashtra, In

• Performing the role of the Team Lead for Integrating Identity and access management (CA Siteminder) with the applications of British Telecom, providing the most feasible and appropriate solution to the client. Sometimes acting as a consultant, convincing the client why CA Siteminder is required in their environment. Designing the Policies and the objects which will be most feasible for the client’s environment.• Understanding the complexity of the client’s architecture and integrating the client’s Applications with CA Siteminder.• Creating the Development environment and then migrating it to Test, Pre-life and further to the live environment.

Navi Mumbai, Maharashtra , In

Teleservices Ltd (05/03 - 08/06)• System Administrator [ Solaris 8 & 9 ]• Managing user’s account, user creation deletion user permissions, setting File/directory permissions, mount unmounts directories, partitions, backup on dat tapes.• Implementing Security Policy, Password Management etc.• Proper management of system resources, disk management• Knowledge of NFS, NIS, VERITAS Volume Manager.• Automate various day to day tasks using Shell scripts • Scripts that include : • To add both ways neighbors, • Automation of the Backup procedure for event logs, • Installation and Configuration of RAN networks that includes:• Sun Solaris Netra T20 servers, SUN-Store-edge 3300 (external storage).• Backups and Recovery plan for disasters.• Monitoring health and performance of all servers.• Preparation of database for upcoming BTS for the Network.• Planning and adding new BTS Sites in the network by using shell script.

Navi Mumbai, Maharashtra, In

Secunderabad, Ap, In

Bachelor Of Engineering - Be, Electronics And Telecommunications

Higher Secondary

Education record